IDP Policy JN0-336 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which match condition can be specified in an IDP rule to limit the rule to traffic destined for a specific server?

   • ADestination address
   • BSource address
   • CApplication
   • DAttack object
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the effect of the 'ignore' action in an IDP rule?

   • AIt drops the packet and sends a TCP reset
   • BIt allows the traffic to pass without any IDP inspection
   • CIt logs the event but allows the traffic
   • DIt blocks the traffic and sends an alert
   Reveal Solution Discussion Select an answer first
4. 8expert · easy

   An IDP policy has two rules: Rule A matches 'HTTP:INVALID-REQUEST' with action 'drop', and Rule B matches 'HTTP:INVALID-REQUEST' with action 'ignore'. The rules are in order: Rule A then Rule B. What happens to a packet that matches both rules?

   • AThe packet is ignored because Rule B's action is less severe.
   • BThe packet is dropped because Rule A matches first.
   • CThe packet is both dropped and ignored, resulting in a drop.
   • DThe packet is passed to the next rule because 'drop' is not a terminating action.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   When configuring an IDP rulebase, which element is used to specify the type of attack to detect?

   • AAction
   • BAttack object
   • CSource zone
   • DDestination port
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the purpose of disabling a specific attack object in an IDP policy?

   • ATo increase the performance of the device
   • BTo update the signature database
   • CTo prevent that attack from being detected
   • DTo change the action of the rule
   Reveal Solution Discussion Select an answer first